{
  "artifact_type": "offline_educational_demo_provenance",
  "generated_at_utc": "2026-09-17T01:45:53.759Z",
  "runtime": "Node.js v26.3.1",
  "crypto_implementation": "Node.js built-in node:crypto using Ed25519",
  "signing_format": "Compact JWS with protected alg=EdDSA, kid=demo-provider-key-1, custom typ=usage-statement+jws",
  "payload_format": "Custom fictional JSON; not a Vaaya billing schema or JWT claim set",
  "key_provenance": "Fresh random test keypair generated in memory for this artifact. The private key was not exported, written to disk, included in outputs, or reused for any other purpose. The generation process exited after signing.",
  "public_key_spki_sha256": "efd113d79e93387fe7d3a629e60e885ee0a2db93d2d9c396d6b33a0657b2543d",
  "example_clock_utc": "2026-09-17T00:00:00.000Z",
  "fictional_statement_total_cents": 16,
  "separate_owner_policy_cap_cents": 20,
  "currency": "USD",
  "source_of_usage_data": "Author-created fictional test values; no provider or customer usage was obtained.",
  "tampering_procedure": "Change payload total_cents from 16 to 17; retain protected header and original signature bytes.",
  "verification_procedure": "Run node verify-usage-statement.mjs; capture stdout in verification-results.json; independently check expected outcomes.",
  "payments_executed": 0,
  "accounts_accessed": 0,
  "network_requests": 0,
  "limitations": [
    "Not a Vaaya format, integration, invoice, or payment record.",
    "Cryptographic validity does not establish service delivery or grant payment authority.",
    "Public-key pinning demonstrates a mechanism, not independent verification of a provider identity.",
    "Replay checks use in-memory fixtures; no durable storage, concurrency protection, or payment orchestration is provided.",
    "Key rotation and revocation are not implemented.",
    "The fixed example clock is intentional; production requires a trusted current clock."
  ]
}
